Fix IAM role race condition (#12467)

GoogleCloudPlatform · Dec 11, 2024 · 904cffa · 904cffa
1 parent 0e2101b
commit 904cffa
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.../third_party/terraform/services/dataflow/resource_dataflow_flex_template_job_test.go.tmpl b/.../third_party/terraform/services/dataflow/resource_dataflow_flex_template_job_test.go.tmpl
@@ -136,6 +136,9 @@ func TestAccDataflowFlexTemplateJob_FullUpdate(t *testing.T) {
 		PreCheck:                 func() { acctest.AccTestPreCheck(t) },
 		ProtoV5ProviderFactories: acctest.ProtoV5ProviderFactories(t),
 		CheckDestroy:             testAccCheckDataflowJobDestroyProducer(t),
+		ExternalProviders: map[string]resource.ExternalProvider{
+		    "time": {},
+		},
 		Steps: []resource.TestStep{
 			{
 				Config: testAccDataflowFlexTemplateJob_dataflowFlexTemplateJobFull(job, bucket, topic, randStr),
@@ -870,7 +873,13 @@ resource "google_storage_bucket_object" "schema" {
 EOF
 }
 
+resource "time_sleep" "wait_bind_iam_roles" {
+  depends_on = [google_project_iam_member.dataflow-worker, google_project_iam_member.dataflow-storage]
+  create_duration = "300s"
+}
+
 resource "google_dataflow_flex_template_job" "flex_job_fullupdate" {
+  depends_on = [time_sleep.wait_bind_iam_roles]
   name = "%s"
   container_spec_gcs_path = "gs://${data.google_storage_bucket_object.flex_template.bucket}/${data.google_storage_bucket_object.flex_template.name}"
   on_delete = "cancel"